What is a common mistake with encryption and key management in Cloud Security?

Hard-coding keys or secrets in source code and never rotating them defeats many benefits of encryption. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.